![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/August/7/323030313a3530333a666634343a3a2f34382d3438203d3e2037373139.roa
File: 323030313a3530333a666634343a3a2f34382d3438203d3e2037373139.roa (raw, json)
Hash identifier: irMIJ5v8j5aCSDzt1AQY08NqSDUVIC5WZwydHuTszbs=
Subject key identifier: 62:6E:B1:C1:C4:1A:87:4D:A0:AD:91:2E:1F:06:11:8A:CB:C9:C6:6F
Certificate issuer: /CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Certificate serial: 19350326FE56563BE278C7B12A327FE33D44C47E
Authority key identifier: 2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject info access: rsync://dev.tw/rpki/August/7/323030313a3530333a666634343a3a2f34382d3438203d3e2037373139.roa
Signing time: Wed 22 May 2024 12:14:03 +0000
ROA not before: Wed 22 May 2024 12:09:03 +0000
ROA not after: Wed 21 May 2025 12:14:03 +0000
asID: 7719
IP address blocks: 2001:503:ff44::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:35:03:26:fe:56:56:3b:e2:78:c7:b1:2a:32:7f:e3:3d:44:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54
Validity
Not Before: May 22 12:09:03 2024 GMT
Not After : May 21 12:14:03 2025 GMT
Subject: CN=626EB1C1C41A874DA0AD912E1F06118ACBC9C66F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:90:dc:51:05:11:65:84:17:02:1e:35:cc:
e5:06:50:b7:28:ab:6d:d4:9b:1a:e7:73:81:45:15:
7a:45:cc:ff:f9:d9:4c:01:02:0b:8c:1e:16:f4:1b:
5c:80:7f:83:de:b1:85:81:ba:3a:1f:72:23:e0:17:
06:1c:a2:d5:4c:c8:84:11:2a:46:af:f2:4b:06:36:
41:1b:dc:2e:d2:ae:92:eb:6e:f1:3a:9a:ab:ed:f2:
41:67:b9:f6:85:7d:56:ff:8d:1a:9c:f5:5f:18:e7:
79:c7:0a:57:45:bc:01:b7:e0:c8:f0:98:01:d5:7b:
29:d2:a4:5f:e1:55:5b:4f:49:4b:14:6c:07:23:1e:
04:45:bf:1f:55:27:58:ce:b7:3e:1b:a5:83:e0:36:
88:ef:05:f7:e4:c3:38:b3:cd:dc:ad:73:e2:45:7b:
b8:0a:62:dd:3b:25:38:6a:ea:e8:56:0a:18:fd:65:
8e:41:bd:14:7c:b9:4b:ae:bf:3d:e5:3e:16:f8:cc:
8c:ef:9d:72:83:fe:3b:a8:f2:ad:84:25:ef:62:a0:
75:da:a1:27:aa:30:84:2e:4f:a5:26:60:58:af:a6:
49:82:9d:39:15:b4:49:76:93:53:14:8e:8c:ea:02:
ed:4c:3e:c5:df:e6:99:bd:29:8f:be:69:33:2f:a8:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:B1:C1:C4:1A:87:4D:A0:AD:91:2E:1F:06:11:8A:CB:C9:C6:6F
X509v3 Authority Key Identifier:
keyid:2B:21:F7:C7:6C:59:21:76:1F:A8:EF:5B:12:17:2C:8E:4B:45:B6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/7/323030313a3530333a666634343a3a2f34382d3438203d3e2037373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:503:ff44::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c9:57:a5:eb:9b:56:ab:ef:86:eb:95:fd:79:64:b8:4f:9b:
a4:44:d9:fc:a5:55:ba:3a:45:2f:48:08:67:96:a4:92:a9:16:
d6:db:02:46:28:5f:46:9f:56:12:22:d7:45:a5:7a:b9:b2:81:
83:f5:6c:28:9c:d6:fa:a1:7b:40:61:92:32:26:2e:ee:fd:ee:
3a:fc:a2:32:79:bc:4d:f9:50:52:d2:6e:6f:5c:b1:e2:26:b9:
c5:23:2a:b0:06:71:76:8e:da:f2:91:1d:9b:f6:77:03:d9:1d:
75:60:e7:b3:32:f2:cb:10:d2:ed:fa:96:63:64:ca:8d:c4:ee:
a2:86:32:d2:d4:1f:90:f9:67:e3:86:a8:4e:ec:4f:09:c1:0c:
69:d6:ee:58:4b:ff:cf:73:a2:2e:f5:6e:8c:ce:41:ca:4c:48:
6f:14:ab:df:d8:76:50:4e:3f:84:ec:0c:84:f2:96:ed:3f:c0:
32:8a:ab:51:b7:c2:bc:e1:51:00:7e:1e:13:4b:2a:c0:52:ef:
11:c7:7a:b1:f1:11:30:5a:c9:c9:7f:6b:d3:5b:a8:79:13:33:
af:d3:3c:e3:e7:9d:e5:17:16:67:68:ee:87:88:8a:31:03:e4:
21:9a:24:af:0c:5d:40:46:c3:65:f9:2a:e3:5d:43:32:3f:ae:
64:49:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:39 2025 by rpki-client